Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3135312e302f32342d3234203d3e203631353837.roa
File:                     3137392e34382e3135312e302f32342d3234203d3e203631353837.roa (raw, json)
Hash identifier:          sGlsiaI13gDPV+TJcj8kOfSZE3b/h857+AFQdZLuvdc=
Subject key identifier:   64:4D:C3:56:0B:38:F9:88:70:F5:86:B9:73:6C:BD:1B:A2:7B:94:45
Certificate issuer:       /CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
Certificate serial:       4250A53C27BD43D6342E9675CAC6B1DF7879F02D
Authority key identifier: 1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3135312e302f32342d3234203d3e203631353837.roa
Signing time:             Tue 31 Dec 2024 18:12:31 +0000
ROA not before:           Tue 31 Dec 2024 18:07:31 +0000
ROA not after:            Tue 30 Dec 2025 18:12:31 +0000
asID:                     61587
IP address blocks:        179.48.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl
                          rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:50:a5:3c:27:bd:43:d6:34:2e:96:75:ca:c6:b1:df:78:79:f0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F11E558FC75D9DA15039EA58D5A166A6F5EF10B
        Validity
            Not Before: Dec 31 18:07:31 2024 GMT
            Not After : Dec 30 18:12:31 2025 GMT
        Subject: CN=644DC3560B38F98870F586B9736CBD1BA27B9445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:c9:f1:f3:b4:3f:58:c0:ab:3e:83:34:86:
                    4f:72:83:47:e4:a3:ed:40:21:0f:77:36:44:db:b7:
                    6e:aa:d0:d5:33:b7:95:e6:8d:dc:be:c7:b5:07:f5:
                    40:20:dc:5d:5e:0e:87:3e:de:98:bd:a0:24:bc:c3:
                    22:3c:b5:e1:d9:0f:07:76:a4:a0:31:eb:aa:21:65:
                    0e:93:ed:a0:9d:81:07:f7:b0:e2:56:c5:13:38:59:
                    cf:fd:f1:e3:96:5b:ff:4a:16:28:01:f2:6e:17:1b:
                    b5:23:6c:b4:02:3c:5d:db:8c:1f:a1:87:bf:fd:6d:
                    cd:ea:bb:70:f4:4a:db:3d:ca:35:db:e4:63:c0:b7:
                    06:28:4c:90:70:dd:88:ec:45:de:ed:c6:19:f0:85:
                    c0:84:b1:dd:ae:7f:11:5c:de:6b:64:55:e3:eb:69:
                    82:3e:3b:4b:66:9f:a0:3f:d4:5d:31:af:d0:a8:82:
                    d0:09:bc:54:d7:c8:8b:3f:40:dd:72:b5:10:24:2b:
                    cc:28:cd:b7:e4:2c:85:6d:af:ee:fd:f3:19:c8:5d:
                    6d:85:b5:e1:e9:37:83:86:05:74:9b:b3:cb:e2:4a:
                    a1:d9:3f:21:93:5d:91:96:7e:26:3c:3a:a2:0f:ae:
                    f1:ef:f2:76:6d:40:26:29:87:c7:86:44:7d:2c:b0:
                    f4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4D:C3:56:0B:38:F9:88:70:F5:86:B9:73:6C:BD:1B:A2:7B:94:45
            X509v3 Authority Key Identifier:
                keyid:1F:11:E5:58:FC:75:D9:DA:15:03:9E:A5:8D:5A:16:6A:6F:5E:F1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F11E558FC75D9DA15039EA58D5A166A6F5EF10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/3137392e34382e3135312e302f32342d3234203d3e203631353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:1a:fc:6c:8e:8c:a9:92:c8:1d:96:85:9b:99:c2:b1:5e:88:
         87:c6:2a:14:4e:a5:49:1d:c1:8d:c5:5c:76:47:0c:8d:8b:69:
         8f:f4:70:32:21:a9:67:07:ca:e3:f7:13:76:70:d6:00:54:b5:
         1f:d6:c6:b4:63:e7:11:c9:16:dc:e7:ae:60:9f:57:d2:c9:54:
         a4:ac:5e:6f:80:db:22:f8:41:27:f2:a3:8a:1e:1e:5f:fc:90:
         d6:8a:72:f6:20:3a:e5:76:7a:5d:a3:6b:55:22:7f:ca:d1:54:
         76:a5:cf:59:67:89:75:05:33:d0:63:1d:fa:f0:0e:cc:b4:ee:
         fc:89:5e:29:fb:c1:5a:63:4f:8e:f6:e0:4f:7b:12:be:c6:44:
         a1:1d:c8:72:6c:86:54:7e:52:d5:82:fa:3a:f7:28:c6:b1:93:
         9d:45:ae:d2:3c:e7:51:ad:1e:5f:cd:1f:fb:5e:54:18:0d:49:
         55:d2:ae:51:1f:6b:ef:49:db:3e:69:57:fc:42:74:f8:ed:87:
         0f:6f:1d:5d:2b:5d:f8:8e:29:6f:6a:79:76:f7:70:1d:09:a3:
         c4:cd:22:83:0c:a7:e3:43:5b:8f:9d:60:22:56:9d:78:b5:ce:
         19:f3:6e:75:f2:87:b9:5a:b3:e8:cf:a2:92:10:05:13:92:78:
         fe:3f:5c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:52 2025 by rpki-client on console.sobornost.net